Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/VNz7hqvsR-ukZZdtpVM76UMDGBM.roa
File: VNz7hqvsR-ukZZdtpVM76UMDGBM.roa (raw, json)
Hash identifier: jwbsYUXQD8OEknZhDbXeDAo0cGFYmN+VJd34+E+HgvE=
Subject key identifier: 54:DC:FB:86:AB:EC:47:EB:A4:65:97:6D:A5:53:3B:E9:43:03:18:13
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 01992A20E9A00792F8FFEB20A989A17350B0
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/VNz7hqvsR-ukZZdtpVM76UMDGBM.roa
Signing time: Mon 08 Sep 2025 16:20:23 +0000
ROA not before: Mon 08 Sep 2025 16:20:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215289
IP address blocks: 2a14:a405::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2a:20:e9:a0:07:92:f8:ff:eb:20:a9:89:a1:73:50:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Sep 8 16:20:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54dcfb86abec47eba465976da5533be943031813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:30:3c:db:8f:1f:8e:7c:be:6a:86:73:32:
70:31:11:da:27:e2:2a:3b:61:07:4b:42:c0:f8:be:
c5:36:ce:dc:fc:29:41:64:ca:aa:0b:3c:82:b7:6a:
98:b1:68:d3:e6:51:c4:a0:bd:46:81:1a:35:f4:9a:
79:13:63:48:58:57:8a:28:4d:f0:dd:a6:b3:42:49:
0c:aa:90:99:6e:e2:a9:78:f1:77:50:2d:ac:17:b5:
02:a3:53:2c:cd:f9:fd:44:20:2d:e6:e9:b6:d8:bb:
57:14:70:63:b2:16:86:ab:a4:63:4a:58:fc:90:e7:
ed:1b:27:54:54:6c:d7:86:58:fe:15:b1:90:a3:e4:
34:34:24:7a:dd:3d:00:8b:7c:9f:57:6c:22:cd:ed:
86:c0:b2:82:7e:f6:cd:9c:4d:34:77:91:4e:5f:b1:
9e:56:5c:f4:87:6f:1c:8b:9a:dd:5a:38:db:f5:31:
33:5b:56:44:d1:67:6a:0b:73:42:60:5e:a6:6b:78:
cc:6b:6c:3b:bc:92:23:9a:6a:02:0d:88:17:b5:b4:
91:59:92:57:eb:6e:94:60:67:dd:d1:7e:c6:83:9c:
5c:f8:22:44:20:06:10:21:34:a0:ad:22:62:77:c7:
4b:62:48:5e:c2:7a:57:1a:0c:8f:b9:f9:1f:3d:ab:
c1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DC:FB:86:AB:EC:47:EB:A4:65:97:6D:A5:53:3B:E9:43:03:18:13
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/VNz7hqvsR-ukZZdtpVM76UMDGBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:a405::/32
Signature Algorithm: sha256WithRSAEncryption
11:75:98:28:49:af:a4:66:b7:40:b6:52:33:ea:3e:c6:82:03:
9c:5f:33:72:fe:7c:15:69:85:87:8d:bb:8b:b6:e6:cf:93:97:
3f:33:5b:13:44:9d:b4:d8:7e:5a:e1:2b:a8:89:08:c1:a6:6f:
37:38:3f:60:e9:88:ba:fa:93:84:a2:b2:f7:ef:90:a7:54:6e:
4a:cf:c6:32:be:a2:0c:a5:c7:7b:18:c6:10:e9:f4:99:c1:02:
ad:2d:88:02:f6:cc:5d:63:5c:60:aa:63:41:94:25:43:84:19:
94:32:78:0c:03:fb:72:3c:bf:24:73:84:37:9b:52:d0:09:2e:
e4:0a:57:8c:5e:86:56:58:40:a9:f3:08:88:f9:4d:75:f8:00:
85:87:1b:b7:e6:21:7d:a2:b3:15:8f:a8:1d:ba:34:e1:52:9f:
e9:f7:e7:2d:e6:09:55:ad:44:c2:d2:3c:c7:a0:34:75:f0:30:
df:35:9c:40:15:f5:cb:82:fd:ce:22:31:e5:e6:9d:a6:b9:1a:
26:3f:f2:92:ec:4a:16:6b:c1:29:12:0a:3e:88:99:44:52:0e:
1a:58:80:73:2d:7d:b5:ed:17:dc:74:e1:c7:7b:23:a4:cf:1a:
16:80:b7:c1:fd:80:0d:04:d8:0c:ce:84:77:97:64:be:b5:71:
7c:af:b9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:15:15 2025 by rpki-client